You signed a three-year SaaS contract with a vendor whose website advertised 99.99% uptime, SOC 2 compliance, and dedicated NYC-based support. Six months in, your Midtown firm is down for hours at a time, the SOC 2 audit was never completed, and the 'dedicated support' is a chatbot. You start asking around and discover dozens of other small businesses across Manhattan and Brooklyn signed the same contract based on the same marketing. Your lawyer mentions a GBL § 349 deceptive